NEAR Intentions resumes service after $3.8 million vulnerability attack, promises full compensation

NEAR Intents 服务恢复：$380 万美元漏洞事件后续及全额赔偿承诺

NEAR Intents 在经历了一起影响 BSC 链上 USDT 的 $380 万美元安全漏洞后，已恢复服务。联合创始人 Illia Polosukhin 承诺将向所有受影响用户进行全额赔偿。

事件概要

攻击者利用了 Omni 存款与取款系统与 NEAR Intents 智能合约之间的交互漏洞。Polosukhin 表示，团队在检测到漏洞后的一小时内便完成了修复。目前，NEAR Intents 和 near.com 已重新上线，尽管部分受影响的链仍处于限制状态。据 Polosukhin 称，核心 NEAR 协议、NEAR 代币以及其他基于 NEAR 的应用程序均未受到影响。

10 月 1 日，NEAR 联合创始人 Illia Polosokhin 宣布，在 SHIELD 安全系统检测到异常活动并暂时暂停服务后，团队已恢复了 NEAR Intents 和 near.com 的服务。当天早些时候，NEAR Intents 遭受了价值 380 万美元的攻击。Intents 上的 AI 安全层 SHIELD 检测到了异常行为，导致服务被暂时暂停。Polosukhin 确认：“所有受影响的用户都将获得全额赔偿。”

他在事故报告中指出，损失金额为 380 万美元，漏洞涉及 Omni 的存/取基础设施与 NEAR Intents 智能合约之间的交互。他将受影响的资产和网络限定为 BSC 上的 USDT。

快速响应与影响范围

According to Polosukhin, SHIELD detected abnormal behavior that exceeded normal activity patterns, triggering a temporary pause mechanism. The Intentions team then identified specific vulnerabilities and fixed them within an hour of testing.

When announcing the restart of the service, the co-founder mentioned that there were still a few affected chains on Intents that were not available. His updates show that NEAR Intention and near.com have been back online, but the connection is still limited.

Polosukhin also clearly distinguished the affected infrastructure from the underlying blockchain, emphasizing that the core NEAR protocol, its native tokens, and other applications running on NEAR were not affected.

Regarding the operating scale of the service, he pointed out that NEAR Intention's monthly transactions and payments have exceeded US$4 billion. He called this incident the first major vulnerability attack suffered by Intents and said the team would conduct a comprehensive review and post-mortem analysis. "At this scale, we must adhere to higher safety standards."

Security measures upgrades and past cases

While outlining response measures, Polosukhin said that the investigation results of this incident will be incorporated into additional security measures, and work on a formal verification system for NEAR contracts is also being advanced.

Previously, the same security system had blocked Bitget-related transfer attempts. Reports on September 29 showed that the platform had intercepted Bitget-related transfers worth more than $50 million, and Alex Shevchenko, general manager of NEAR Intentions, attributed the intervention to SHIELD's screening of activity through the service.

According to Shevchenko, during the execution process, the system froze approximately $503,000, while approximately $166,000 of suspected stolen funds had passed through before the activity was stopped. He said the rejected transfers then flowed to other providers. Previous reports cited Bitget's confirmation that during the exchange's September 24 security breach, attackers moved approximately $387.5 million to addresses it controlled.

Regarding the frozen funds, Shevchenko stated that NEAR Intentions will return the funds through appropriate legal procedures and waive Bitget's recovery bonuses. He emphasized that this involves transactions that attempt to use NEAR Intention, rather than being able to freeze assets across the entire blockchain.

In an Oct. 1 statement, Polosukhin described SHIELD as an AI-based surveillance and anomaly detection system and invited more partners to share information to help identify and curb criminal activity.

Market background and new integration

For U.S. investors, the incident follows the release of the Bitwise NEAR ETF on September 29, which began trading on NYSE Arca under the symbol NRR. According to Bitwise, the fund charges a 0.75% management fee and holds NEAR directly, allowing investors to obtain exposure through traditional brokerage accounts. Bitwise said it intends to pledge the fund's NEAR through its institutional pledge operation, with the proceeds distributed to shareholders through net asset value. At the time of release, the asset management company cited data showing that as of September 25, the annualized network pledge yield was approximately 5%, while emphasizing that the income may change and is not guaranteed to be realized.

In its statement, Bitwise pointed out that the value of fund shares is related to the NEAR it holds. Its risk disclosure also states that these positions may face loss, theft, damage or access restrictions.

Polosukhin's explanation of the October 1 vulnerability specifically states that the USDT on BSC was affected, while the NEAR token was not affected. His compensation promise covers users affected by the vulnerability.

In addition, the restored infrastructure supports an integration announced in September. According to a September 22 report on the integration of NEAR and Ondo tokenized assets, Ondo Finance stated that eligible near.com users can exchange supported cryptocurrency assets for 20 tokenized U.S. stocks, ETFs and commodity-linked products. Initial options include Tesla, Nvidia, Apple, Microsoft and Amazon, as well as QQQ, SLV and IAU.

According to the company, NEAR Intention connects more than 30 blockchains and uses independent solvers to perform transactions requested by users. Supporting financial assets integrated by Ondo include Bitcoin and USDC.

Ondo's disclosure documents restrict access to U.S. people, even though its products track U.S. listed securities. The company statement stated that Ondo Stocks is not registered under the Securities Act of 1933 and cannot be provided or sold in the United States or to U.S. persons without registration or applicable exemptions.

Future Outlook

On the security front, Polosukhin called for strengthened contract standards, monitoring and preventive measures, citing recent attacks on Bitget, MetaMask and Lido. He said criminals are using AI systems to detect infrastructure.

As part of the planned contract release process, Polosukhin said that the NEAR ecosystem is about to implement formal verification, which he describes as a tool to prevent a type of vulnerability. According to its statement, additional security measures will come from a post-mortem analysis of the incident.